This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

emails get stucked in mail spool and no warning

Hello everybody,

I have a problem with the XG mail Spool. I'm running XG 125w under firmware: SFOS 16.05.0 GA in MTA mode. The Sophos XG is filtering SMTP inbound and outbound.

Sometimes I check the mail spool, and every once in a while, I can see some emails with "failed" status. So we have 2 problems:

1. Those "failed" to delivery mails come from our email server to the outside, and they are valid emails accounts with no problems (we checked). So they're getting stuck without any reason we can diagnose. It happened even when an email has 10 receiver addresses, 6 of them where delivered and 4 where not (all of them, valid email addresses).

2. The sender doesn't receive any alerts that it's emails aren't being delivered, and this is the worst part, because we aren't checking the mail spool 24/7.

Do you have any workaround this issue?

Regards,

Jose

This thread was automatically locked due to age.

0 B.R.O. over 8 years ago

Here is my 2 cents for the weekend, acl rules, mx records, and MXtoolbox diagnostics may find something you need to correct.

https://community.sophos.com/products/xg-firewall/f/email-protection/81527/email-protection---mta-mode
Cancel
Vote Up 0 Vote Down

Cancel
0 JoseCasanova over 8 years ago in reply to B.R.O.

Thanks for your answer B.R.O.

however, this case is different. I'm using MTA, everything is "working". But sometimes, some emails get stuck on mail spool. I've checked those emails in mxtoolbox and other mail chekers. Does accounts are just fine, but Sophos XG failed to deliver the email. And I figure this out by enter in the "Mail Spool" tab of email section of Sophos XG (firmware 16.05).

So I need an alert that tells the sender "Your email wasn't delivered", and a reason of this emails getting "failed" in the mail spool.

Thanks again for all your help.

Regards,

Jose
Cancel
Vote Up 0 Vote Down

Cancel
0 Casey Kourofsky over 7 years ago in reply to JoseCasanova

I realize this thread is over a year old. However, we have the exact same problem on v17. Restarting the MTA service usually kicks things back into gear and emails will start moving through again. However, I am still searching for either a solution or an alert. Did you ever discover either one?
Cancel
Vote Up 0 Vote Down

Cancel
0 sachingurung over 7 years ago in reply to Casey Kourofsky

Hi Casey,

PM me the awarren_mta.log for the time period when the issue started till the service was restarted. Refer the following KB article to get the log file information, community.sophos.com/.../123185

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 Casey Kourofsky over 7 years ago in reply to sachingurung

Thank you. I have attempted to retrieve the log file.

I used the command grep "2018-05-01 11:30" awarrenmta.log. However, I am not familiar enough with the commands. The error happened around 11:50 this morning. And I restarted the MTA service around 2:20 this afternoon when the problem was noticed. What command should I be using?
Cancel
Vote Up 0 Vote Down

Cancel
0 sachingurung over 7 years ago in reply to Casey Kourofsky

Hi Casey,

You can use the following command to get the logs,

cat awarrenmta.log | grep 'May 2'

If the command works for you then, copy the log lines and PM me.

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 Casey Kourofsky over 7 years ago in reply to sachingurung

Hello, I was able to get the log and have sent them to you via private message. Thanks for your time on this!
Cancel
Vote Up 0 Vote Down

Cancel